In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). syzbot reported divide-by-zero in __tcp…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). syzbot reported divide-by-zero in __tcp_select_window() by MPTCP socket. [0] We had a similar issue for the bare TCP and fixed in commit 499350a5a6e7 ("tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0"). Let's apply the same fix to mptcp_do_fastclose(). [0]: Oops: divide error: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 6068 Comm: …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/05f5e26d488cdc7abc2a826cf1071782d5a21203
- https://git.kernel.org/stable/c/46b8b58f93f1b383c3840fc6e8fab6c3bce9295f
- https://git.kernel.org/stable/c/88163f85d59b4164884df900ee171720fd26686b
- https://git.kernel.org/stable/c/eee39f83246a81d970a9ecb7392b7ab74e660094
- https://git.kernel.org/stable/c/f07f4ea53e22429c84b20832fa098b5ecc0d4e35
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Timeline
- nvd_ingest NVD